Prepare npm trusted publishing release

Author: rezailmi

.github/workflows/publish.yml

@@ -71,6 +71,7 @@ jobs:
     if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.task == 'release' && github.ref == 'refs/heads/main' }}
     runs-on: ubuntu-latest
     permissions:
+      contents: read
       id-token: write
 
     steps:
@@ -88,11 +89,6 @@ jobs:
       - name: Install dependencies
         run: bun install --frozen-lockfile
 
-      - name: Verify npm authentication
-        run: npm whoami
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-
       - name: Build
         run: bun run build
 
@@ -127,8 +123,6 @@ jobs:
 
       - name: Publish to npm
         run: npm publish --provenance --tag "${{ steps.publish_tag.outputs.tag }}"
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
 
   unpublish:
     if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.task == 'unpublish' && github.ref == 'refs/heads/main' }}

.gitignore

@@ -7,3 +7,4 @@ dist/
 coverage/
 *.tgz
 .vite/
+.claude/worktrees/

.npmignore

@@ -0,0 +1,11 @@
+# Keep this file so npm does not fall back to .gitignore.
+# The package intentionally publishes generated files from dist/.
+node_modules/
+.claude/worktrees/
+.env
+.env.*
+*.log
+.DS_Store
+coverage/
+*.tgz
+.vite/

README.md

@@ -5,7 +5,7 @@
 Visual CSS editor for React. Edit styles in the browser, then copy agent-ready edits with component and file context.
 
 <p align="center">
-  <img src=".github/screenshot.png" alt="handmade visual editor" width="720" />
+  <img src="https://raw.githubusercontent.com/rezailmi/made-refine/main/.github/screenshot.png" alt="handmade visual editor" width="720" />
 </p>
 
 ## Quick start

package.json

@@ -34,13 +34,13 @@
     "./preload.iife": "./dist/preload/preload.js"
   },
   "bin": {
-    "made-refine": "./dist/cli.cjs"
+    "made-refine": "dist/cli.cjs"
   },
   "sideEffects": true,
   "files": [
     "dist",
     "README.md",
-    "LICENSE"
+    "LICENSE.md"
   ],
   "keywords": [
     "react",

src/package-portability.test.ts

@@ -35,31 +35,60 @@ function getPackedFiles(): string[] {
     .filter((file): file is string => Boolean(file))
 }
 
+function getNpmPackedFiles(): string[] {
+  const output = execSync('npm pack --dry-run --json', {
+    cwd: root,
+    encoding: 'utf8',
+  })
+  const [pack] = JSON.parse(output) as Array<{ files: Array<{ path: string }> }>
+  return pack.files.map((file) => file.path)
+}
+
 describe('package portability', () => {
   beforeAll(() => {
     ensureDistArtifacts()
   })
 
+  const requiredPackageFiles = [
+    'dist/index.js',
+    'dist/index.mjs',
+    'dist/index.d.ts',
+    'dist/utils.js',
+    'dist/utils.mjs',
+    'dist/styles.css',
+    'dist/preload/preload.js',
+    'dist/vite.mjs',
+    'dist/vite.d.ts',
+    'dist/babel.cjs',
+    'README.md',
+    'LICENSE.md',
+  ] as const
+
   it('ships required runtime artifacts in bun pack output', () => {
-    const files = getPackedFiles()
+    expect(getPackedFiles()).toEqual(expect.arrayContaining([...requiredPackageFiles]))
+  })
+
+  it('ships required runtime artifacts in npm pack output', () => {
+    const files = getNpmPackedFiles()
     expect(files).toEqual(
       expect.arrayContaining([
-        'dist/index.js',
-        'dist/index.mjs',
-        'dist/index.d.ts',
-        'dist/utils.js',
-        'dist/utils.mjs',
-        'dist/styles.css',
-        'dist/preload/preload.js',
-        'dist/vite.mjs',
-        'dist/vite.d.ts',
-        'dist/babel.cjs',
-        'README.md',
-        'LICENSE.md',
+        ...requiredPackageFiles,
+        'dist/cli.cjs',
+        'package.json',
       ]),
     )
   })
 
+  it('can run npm publish dry-run without package metadata corrections', () => {
+    const output = execSync('npm publish --dry-run --tag latest 2>&1', {
+      cwd: root,
+      encoding: 'utf8',
+    })
+
+    expect(output).toContain('made-refine@')
+    expect(output).not.toContain('auto-corrected')
+  })
+
   it('loads built cjs/esm/vite entrypoints', async () => {
     const cjsPath = path.join(root, 'dist/index.js')
     const esmPath = path.join(root, 'dist/index.mjs')